1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. firestore
  5. UserCreds
Google Cloud v9.4.0 published on Tuesday, Nov 4, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.firestore.UserCreds

Start a Neo task
Explain and create a gcp.firestore.UserCreds resource
gcp logo
Google Cloud v9.4.0 published on Tuesday, Nov 4, 2025 by Pulumi
pulumi/pulumi-gcp

    User credentials for a Cloud Firestore with MongoDB compatibility database. The resource is owned by the database and is deleted along with the database.

    To get more information about UserCreds, see:

    Example Usage

    Firestore User Creds Basic

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const database = new gcp.firestore.Database("database", {
    project: "my-project-name",
    name: "database-id-mongodb-compatible",
    locationId: "nam5",
    type: "FIRESTORE_NATIVE",
    databaseEdition: "ENTERPRISE",
    deleteProtectionState: "DELETE_PROTECTION_DISABLED",
    deletionPolicy: "DELETE",
});
const my_user_creds = new gcp.firestore.UserCreds("my-user-creds", {
    project: "my-project-name",
    database: database.name,
    name: "my-username",
});

    import pulumi
import pulumi_gcp as gcp

database = gcp.firestore.Database("database",
    project="my-project-name",
    name="database-id-mongodb-compatible",
    location_id="nam5",
    type="FIRESTORE_NATIVE",
    database_edition="ENTERPRISE",
    delete_protection_state="DELETE_PROTECTION_DISABLED",
    deletion_policy="DELETE")
my_user_creds = gcp.firestore.UserCreds("my-user-creds",
    project="my-project-name",
    database=database.name,
    name="my-username")

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/firestore"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		database, err := firestore.NewDatabase(ctx, "database", &firestore.DatabaseArgs{
			Project:               pulumi.String("my-project-name"),
			Name:                  pulumi.String("database-id-mongodb-compatible"),
			LocationId:            pulumi.String("nam5"),
			Type:                  pulumi.String("FIRESTORE_NATIVE"),
			DatabaseEdition:       pulumi.String("ENTERPRISE"),
			DeleteProtectionState: pulumi.String("DELETE_PROTECTION_DISABLED"),
			DeletionPolicy:        pulumi.String("DELETE"),
		})
		if err != nil {
			return err
		}
		_, err = firestore.NewUserCreds(ctx, "my-user-creds", &firestore.UserCredsArgs{
			Project:  pulumi.String("my-project-name"),
			Database: database.Name,
			Name:     pulumi.String("my-username"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var database = new Gcp.Firestore.Database("database", new()
    {
        Project = "my-project-name",
        Name = "database-id-mongodb-compatible",
        LocationId = "nam5",
        Type = "FIRESTORE_NATIVE",
        DatabaseEdition = "ENTERPRISE",
        DeleteProtectionState = "DELETE_PROTECTION_DISABLED",
        DeletionPolicy = "DELETE",
    });

    var my_user_creds = new Gcp.Firestore.UserCreds("my-user-creds", new()
    {
        Project = "my-project-name",
        Database = database.Name,
        Name = "my-username",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.firestore.Database;
import com.pulumi.gcp.firestore.DatabaseArgs;
import com.pulumi.gcp.firestore.UserCreds;
import com.pulumi.gcp.firestore.UserCredsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var database = new Database("database", DatabaseArgs.builder()
            .project("my-project-name")
            .name("database-id-mongodb-compatible")
            .locationId("nam5")
            .type("FIRESTORE_NATIVE")
            .databaseEdition("ENTERPRISE")
            .deleteProtectionState("DELETE_PROTECTION_DISABLED")
            .deletionPolicy("DELETE")
            .build());

        var my_user_creds = new UserCreds("my-user-creds", UserCredsArgs.builder()
            .project("my-project-name")
            .database(database.name())
            .name("my-username")
            .build());

    }
}

    resources:
  database:
    type: gcp:firestore:Database
    properties:
      project: my-project-name
      name: database-id-mongodb-compatible
      locationId: nam5
      type: FIRESTORE_NATIVE
      databaseEdition: ENTERPRISE
      deleteProtectionState: DELETE_PROTECTION_DISABLED
      deletionPolicy: DELETE
  my-user-creds:
    type: gcp:firestore:UserCreds
    properties:
      project: my-project-name
      database: ${database.name}
      name: my-username

    Firestore User Creds With Secret Manager

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const database = new gcp.firestore.Database("database", {
    project: "my-project-name",
    name: "database-id-mongodb-compatible",
    locationId: "nam5",
    type: "FIRESTORE_NATIVE",
    databaseEdition: "ENTERPRISE",
    deleteProtectionState: "DELETE_PROTECTION_DISABLED",
    deletionPolicy: "DELETE",
});
const my_user_creds = new gcp.firestore.UserCreds("my-user-creds", {
    project: "my-project-name",
    database: database.name,
    name: "my-username",
});
const my_fs_user_creds_secret = new gcp.secretmanager.Secret("my-fs-user-creds-secret", {
    project: "my-project-name",
    secretId: "my-fs-user-creds-secret",
    replication: {
        auto: {},
    },
});
const my_fs_user_creds_secret_version = new gcp.secretmanager.SecretVersion("my-fs-user-creds-secret-version", {
    secret: my_fs_user_creds_secret.id,
    secretData: my_user_creds.securePassword,
});

    import pulumi
import pulumi_gcp as gcp

database = gcp.firestore.Database("database",
    project="my-project-name",
    name="database-id-mongodb-compatible",
    location_id="nam5",
    type="FIRESTORE_NATIVE",
    database_edition="ENTERPRISE",
    delete_protection_state="DELETE_PROTECTION_DISABLED",
    deletion_policy="DELETE")
my_user_creds = gcp.firestore.UserCreds("my-user-creds",
    project="my-project-name",
    database=database.name,
    name="my-username")
my_fs_user_creds_secret = gcp.secretmanager.Secret("my-fs-user-creds-secret",
    project="my-project-name",
    secret_id="my-fs-user-creds-secret",
    replication={
        "auto": {},
    })
my_fs_user_creds_secret_version = gcp.secretmanager.SecretVersion("my-fs-user-creds-secret-version",
    secret=my_fs_user_creds_secret.id,
    secret_data=my_user_creds.secure_password)

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/firestore"
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		database, err := firestore.NewDatabase(ctx, "database", &firestore.DatabaseArgs{
			Project:               pulumi.String("my-project-name"),
			Name:                  pulumi.String("database-id-mongodb-compatible"),
			LocationId:            pulumi.String("nam5"),
			Type:                  pulumi.String("FIRESTORE_NATIVE"),
			DatabaseEdition:       pulumi.String("ENTERPRISE"),
			DeleteProtectionState: pulumi.String("DELETE_PROTECTION_DISABLED"),
			DeletionPolicy:        pulumi.String("DELETE"),
		})
		if err != nil {
			return err
		}
		my_user_creds, err := firestore.NewUserCreds(ctx, "my-user-creds", &firestore.UserCredsArgs{
			Project:  pulumi.String("my-project-name"),
			Database: database.Name,
			Name:     pulumi.String("my-username"),
		})
		if err != nil {
			return err
		}
		my_fs_user_creds_secret, err := secretmanager.NewSecret(ctx, "my-fs-user-creds-secret", &secretmanager.SecretArgs{
			Project:  pulumi.String("my-project-name"),
			SecretId: pulumi.String("my-fs-user-creds-secret"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: &secretmanager.SecretReplicationAutoArgs{},
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "my-fs-user-creds-secret-version", &secretmanager.SecretVersionArgs{
			Secret:     my_fs_user_creds_secret.ID(),
			SecretData: my_user_creds.SecurePassword,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var database = new Gcp.Firestore.Database("database", new()
    {
        Project = "my-project-name",
        Name = "database-id-mongodb-compatible",
        LocationId = "nam5",
        Type = "FIRESTORE_NATIVE",
        DatabaseEdition = "ENTERPRISE",
        DeleteProtectionState = "DELETE_PROTECTION_DISABLED",
        DeletionPolicy = "DELETE",
    });

    var my_user_creds = new Gcp.Firestore.UserCreds("my-user-creds", new()
    {
        Project = "my-project-name",
        Database = database.Name,
        Name = "my-username",
    });

    var my_fs_user_creds_secret = new Gcp.SecretManager.Secret("my-fs-user-creds-secret", new()
    {
        Project = "my-project-name",
        SecretId = "my-fs-user-creds-secret",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var my_fs_user_creds_secret_version = new Gcp.SecretManager.SecretVersion("my-fs-user-creds-secret-version", new()
    {
        Secret = my_fs_user_creds_secret.Id,
        SecretData = my_user_creds.SecurePassword,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.firestore.Database;
import com.pulumi.gcp.firestore.DatabaseArgs;
import com.pulumi.gcp.firestore.UserCreds;
import com.pulumi.gcp.firestore.UserCredsArgs;
import com.pulumi.gcp.secretmanager.Secret;
import com.pulumi.gcp.secretmanager.SecretArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;
import com.pulumi.gcp.secretmanager.SecretVersion;
import com.pulumi.gcp.secretmanager.SecretVersionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var database = new Database("database", DatabaseArgs.builder()
            .project("my-project-name")
            .name("database-id-mongodb-compatible")
            .locationId("nam5")
            .type("FIRESTORE_NATIVE")
            .databaseEdition("ENTERPRISE")
            .deleteProtectionState("DELETE_PROTECTION_DISABLED")
            .deletionPolicy("DELETE")
            .build());

        var my_user_creds = new UserCreds("my-user-creds", UserCredsArgs.builder()
            .project("my-project-name")
            .database(database.name())
            .name("my-username")
            .build());

        var my_fs_user_creds_secret = new Secret("my-fs-user-creds-secret", SecretArgs.builder()
            .project("my-project-name")
            .secretId("my-fs-user-creds-secret")
            .replication(SecretReplicationArgs.builder()
                .auto(SecretReplicationAutoArgs.builder()
                    .build())
                .build())
            .build());

        var my_fs_user_creds_secret_version = new SecretVersion("my-fs-user-creds-secret-version", SecretVersionArgs.builder()
            .secret(my_fs_user_creds_secret.id())
            .secretData(my_user_creds.securePassword())
            .build());

    }
}

    resources:
  database:
    type: gcp:firestore:Database
    properties:
      project: my-project-name
      name: database-id-mongodb-compatible
      locationId: nam5
      type: FIRESTORE_NATIVE
      databaseEdition: ENTERPRISE
      deleteProtectionState: DELETE_PROTECTION_DISABLED
      deletionPolicy: DELETE
  my-user-creds:
    type: gcp:firestore:UserCreds
    properties:
      project: my-project-name
      database: ${database.name}
      name: my-username
  my-fs-user-creds-secret:
    type: gcp:secretmanager:Secret
    properties:
      project: my-project-name
      secretId: my-fs-user-creds-secret
      replication:
        auto: {}
  my-fs-user-creds-secret-version:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${["my-fs-user-creds-secret"].id}
      secretData: ${["my-user-creds"].securePassword}

    Create UserCreds Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new UserCreds(name: string, args: UserCredsArgs, opts?: CustomResourceOptions);
    @overload
def UserCreds(resource_name: str,
              args: UserCredsArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def UserCreds(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              database: Optional[str] = None,
              name: Optional[str] = None,
              project: Optional[str] = None)
    func NewUserCreds(ctx *Context, name string, args UserCredsArgs, opts ...ResourceOption) (*UserCreds, error)
    public UserCreds(string name, UserCredsArgs args, CustomResourceOptions? opts = null)
    public UserCreds(String name, UserCredsArgs args)
public UserCreds(String name, UserCredsArgs args, CustomResourceOptions options)

    type: gcp:firestore:UserCreds
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args UserCredsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args UserCredsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args UserCredsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args UserCredsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args UserCredsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var userCredsResource = new Gcp.Firestore.UserCreds("userCredsResource", new()
{
    Database = "string",
    Name = "string",
    Project = "string",
});

    example, err := firestore.NewUserCreds(ctx, "userCredsResource", &firestore.UserCredsArgs{
	Database: pulumi.String("string"),
	Name:     pulumi.String("string"),
	Project:  pulumi.String("string"),
})

    var userCredsResource = new UserCreds("userCredsResource", UserCredsArgs.builder()
    .database("string")
    .name("string")
    .project("string")
    .build());

    user_creds_resource = gcp.firestore.UserCreds("userCredsResource",
    database="string",
    name="string",
    project="string")

    const userCredsResource = new gcp.firestore.UserCreds("userCredsResource", {
    database: "string",
    name: "string",
    project: "string",
});

    type: gcp:firestore:UserCreds
properties:
    database: string
    name: string
    project: string

    UserCreds Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The UserCreds resource accepts the following input properties:

    Database string
    The Firestore database ID.
    Name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    Database string
    The Firestore database ID.
    Name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    database String
    The Firestore database ID.
    name String
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    database string
    The Firestore database ID.
    name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    database str
    The Firestore database ID.
    name str
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    database String
    The Firestore database ID.
    name String
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the UserCreds resource produces the following output properties:

    CreateTime string
    The timestamp at which these user creds were created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceIdentities List<UserCredsResourceIdentity>
    Describes the Resource Identity principal. Structure is documented below.
    SecurePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    State string
    The state of the user creds.
    UpdateTime string
    The timestamp at which these user creds were updated.
    CreateTime string
    The timestamp at which these user creds were created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceIdentities []UserCredsResourceIdentity
    Describes the Resource Identity principal. Structure is documented below.
    SecurePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    State string
    The state of the user creds.
    UpdateTime string
    The timestamp at which these user creds were updated.
    createTime String
    The timestamp at which these user creds were created.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceIdentities List<UserCredsResourceIdentity>
    Describes the Resource Identity principal. Structure is documented below.
    securePassword String
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state String
    The state of the user creds.
    updateTime String
    The timestamp at which these user creds were updated.
    createTime string
    The timestamp at which these user creds were created.
    id string
    The provider-assigned unique ID for this managed resource.
    resourceIdentities UserCredsResourceIdentity[]
    Describes the Resource Identity principal. Structure is documented below.
    securePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state string
    The state of the user creds.
    updateTime string
    The timestamp at which these user creds were updated.
    create_time str
    The timestamp at which these user creds were created.
    id str
    The provider-assigned unique ID for this managed resource.
    resource_identities Sequence[UserCredsResourceIdentity]
    Describes the Resource Identity principal. Structure is documented below.
    secure_password str
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state str
    The state of the user creds.
    update_time str
    The timestamp at which these user creds were updated.
    createTime String
    The timestamp at which these user creds were created.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceIdentities List<Property Map>
    Describes the Resource Identity principal. Structure is documented below.
    securePassword String
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state String
    The state of the user creds.
    updateTime String
    The timestamp at which these user creds were updated.

    Look up Existing UserCreds Resource

    Get an existing UserCreds resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: UserCredsState, opts?: CustomResourceOptions): UserCreds
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        create_time: Optional[str] = None,
        database: Optional[str] = None,
        name: Optional[str] = None,
        project: Optional[str] = None,
        resource_identities: Optional[Sequence[UserCredsResourceIdentityArgs]] = None,
        secure_password: Optional[str] = None,
        state: Optional[str] = None,
        update_time: Optional[str] = None) -> UserCreds
    func GetUserCreds(ctx *Context, name string, id IDInput, state *UserCredsState, opts ...ResourceOption) (*UserCreds, error)
    public static UserCreds Get(string name, Input<string> id, UserCredsState? state, CustomResourceOptions? opts = null)
    public static UserCreds get(String name, Output<String> id, UserCredsState state, CustomResourceOptions options)
    resources:  _:    type: gcp:firestore:UserCreds    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreateTime string
    The timestamp at which these user creds were created.
    Database string
    The Firestore database ID.
    Name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ResourceIdentities List<UserCredsResourceIdentity>
    Describes the Resource Identity principal. Structure is documented below.
    SecurePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    State string
    The state of the user creds.
    UpdateTime string
    The timestamp at which these user creds were updated.
    CreateTime string
    The timestamp at which these user creds were created.
    Database string
    The Firestore database ID.
    Name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ResourceIdentities []UserCredsResourceIdentityArgs
    Describes the Resource Identity principal. Structure is documented below.
    SecurePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    State string
    The state of the user creds.
    UpdateTime string
    The timestamp at which these user creds were updated.
    createTime String
    The timestamp at which these user creds were created.
    database String
    The Firestore database ID.
    name String
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    resourceIdentities List<UserCredsResourceIdentity>
    Describes the Resource Identity principal. Structure is documented below.
    securePassword String
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state String
    The state of the user creds.
    updateTime String
    The timestamp at which these user creds were updated.
    createTime string
    The timestamp at which these user creds were created.
    database string
    The Firestore database ID.
    name string
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    resourceIdentities UserCredsResourceIdentity[]
    Describes the Resource Identity principal. Structure is documented below.
    securePassword string
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state string
    The state of the user creds.
    updateTime string
    The timestamp at which these user creds were updated.
    create_time str
    The timestamp at which these user creds were created.
    database str
    The Firestore database ID.
    name str
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    resource_identities Sequence[UserCredsResourceIdentityArgs]
    Describes the Resource Identity principal. Structure is documented below.
    secure_password str
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state str
    The state of the user creds.
    update_time str
    The timestamp at which these user creds were updated.
    createTime String
    The timestamp at which these user creds were created.
    database String
    The Firestore database ID.
    name String
    The ID to use for the user creds, which will become the final component of the user cred's resource name. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/ with first character a letter and the last a letter or a number. Must not be UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    resourceIdentities List<Property Map>
    Describes the Resource Identity principal. Structure is documented below.
    securePassword String
    The plaintext server-generated password for the user creds. Note: This property is sensitive and will not be displayed in the plan.
    state String
    The state of the user creds.
    updateTime String
    The timestamp at which these user creds were updated.

    Supporting Types

    UserCredsResourceIdentity, UserCredsResourceIdentityArgs

    Principal string
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.
    Principal string
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.
    principal String
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.
    principal string
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.
    principal str
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.
    principal String
    (Output) The principal identifier string. See https://cloud.google.com/iam/docs/principal-identifiers.

    Import

    UserCreds can be imported using any of these accepted formats:

    • projects/{{project}}/databases/{{database}}/userCreds/{{name}}

    • {{project}}/{{database}}/{{name}}

    • {{database}}/{{name}}

    When using the pulumi import command, UserCreds can be imported using one of the formats above. For example:

    $ pulumi import gcp:firestore/userCreds:UserCreds default projects/{{project}}/databases/{{database}}/userCreds/{{name}}

    $ pulumi import gcp:firestore/userCreds:UserCreds default {{project}}/{{database}}/{{name}}

    $ pulumi import gcp:firestore/userCreds:UserCreds default {{database}}/{{name}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v9.4.0 published on Tuesday, Nov 4, 2025 by Pulumi
    pulumi/pulumi-gcp
      Meet Neo: Your AI Platform Teammate